Google Analytics 4 is controlled from a country outside the EU and lacks confirmed EU data storage: processing effectively takes place in a third country. That makes the tool unsuitable for sensitive personal data without additional safeguards. For non-personal data (drafts, public material) it is usually fine.
EU/EEAWeb analyticsFrom approx 390 SEK/monthEU data storage ✓ISO 27001
Polish GA4 challenger in enterprise class with analytics, tag manager and consent management in one package. The Business plan is hosted by Swedish Elastx, but the free plan is gone – the entry cost is now EUR 35 per month.
The interface is available in Swedish
EU company with Business hosting by Swedish Elastx, so data can stay in Sweden
No free plan is available anymore, only paid plans
Best for: Authorities, healthcare providers and larger companies that want GA-like power with EU sovereignty and Swedish hosting
EU/EEAWeb analyticsFrom approx 100 SEK/monthEU data storage ✓
Estonian, cookieless and lightning-fast analytics tool with all data at Hetzner in Germany, GDPR-friendly without a consent banner. There is no free plan, and the deliberate minimalism means advanced analytics needs hit the ceiling.
EU company (Estonia) with all data at European providers in Germany and Finland
Fully cookieless: no consent banner required for basic measurement
No free plan, only 30-day trial
Best for: Small and medium-sized businesses that want to skip the cookie banner and get understandable statistics on a single page
A Dutch, extremely stripped-down analytics tool without cookies: data never leaves the Netherlands and there is a free plan, though it only keeps 30 days of history. Feature depth is the thinnest in the category.
Dutch company: data is stored only in the Netherlands and never leaves the EU
Completely cookie-free and without personal data, no consent banner needed
Free plan only keeps 30 days of history
Best for: Solopreneurs and small businesses that just want to see visitor numbers without a cookie banner, configuration or analytics expertise
No, Google Analytics 4 has no confirmed EU data storage: data is processed in a third country.
Is Google Analytics 4 covered by the CLOUD Act?
The vendor is based outside the EU. US companies are covered by the CLOUD Act regardless of server location; see the tool page for details.
What is needed to use Google Analytics 4 in a GDPR-safe way?
Sign a data processing agreement (DPA) if the tool processes personal data on your behalf, minimise the personal data you feed in, and check the vendor's sub-processors. See our DPA guide for the steps.
Our assessment is based on verified data about vendor, storage and certifications (2026). GDPR compliance also depends on how you use the tool. This is guidance, not legal advice. See How we review.
